CVE-2020-4317

Published: Jul 28, 2020Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177355.

Affected (18)

Products: Ibm: Intelligent Operations Center, Intelligent Operations Center For Emergency Management, Water Operations For Waternamics

Ibm

3 products

Intelligent Operations Center

Intelligent Operations Center For Emergency Management

Water Operations For Waternamics

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Ibm Intelligent Operations Center	Version 5.1.0.2
Ibm Intelligent Operations Center	Version 5.1.0.3
Ibm Intelligent Operations Center	Version 5.1.0.4
Ibm Intelligent Operations Center	Version 5.1.0.6
Ibm Intelligent Operations Center	Version 5.1.0
Ibm Intelligent Operations Center	Version 5.2.1
Ibm Intelligent Operations Center	Version 5.2
Ibm Intelligent Operations Center For Emergency Management	Version 5.1.0.2
Ibm Intelligent Operations Center For Emergency Management	Version 5.1.0.3
Ibm Intelligent Operations Center For Emergency Management	Version 5.1.0.4
Ibm Intelligent Operations Center For Emergency Management	Version 5.1.0.6
Ibm Intelligent Operations Center For Emergency Management	Version 5.1.0
Ibm Water Operations For Waternamics	Version 5.1.0.3
Ibm Water Operations For Waternamics	Version 5.1.0.4
Ibm Water Operations For Waternamics	Version 5.1.0.6
Ibm Water Operations For Waternamics	Version 5.1.0
Ibm Water Operations For Waternamics	Version 5.2.1
Ibm Water Operations For Waternamics	Version 5.2